Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/c6e217-03ff-4396-adfe-255f0c51bbe0/1/BDaS8qHRvHb_f50pCRvtoIt7yWw.mft
File: BDaS8qHRvHb_f50pCRvtoIt7yWw.mft (raw, json)
Hash identifier: +JF0ttkqwZ0UKSY/UwSZFwjHkGYYlgNGlz6TOZkOoyA=
Subject key identifier: 39:53:E9:E0:D1:CF:2E:E2:65:83:AD:62:87:CF:16:DF:48:0B:CB:2C
Authority key identifier: 04:36:92:F2:A1:D1:BC:76:FF:7F:9D:29:09:1B:ED:A0:8B:7B:C9:6C
Certificate issuer: /CN=043692f2a1d1bc76ff7f9d29091beda08b7bc96c
Certificate serial: 019F92B617644CA0DA8AFDD354497BECE828
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BDaS8qHRvHb_f50pCRvtoIt7yWw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/c6e217-03ff-4396-adfe-255f0c51bbe0/1/BDaS8qHRvHb_f50pCRvtoIt7yWw.mft
Manifest number: 19C8
Signing time: Fri 24 Jul 2026 06:00:34 +0000
Manifest this update: Fri 24 Jul 2026 06:00:34 +0000
Manifest next update: Sat 25 Jul 2026 06:00:34 +0000
Files and hashes: 1: 4Pf-r_SG4WPumX9UfrM-bZenj0w.roa (hash: jKC/1JEZDpIqvpS0Gu3om2F42nHobr3sJ5zkUlAPeoY=)
2: BDaS8qHRvHb_f50pCRvtoIt7yWw.crl (hash: 07wQ5Y2KGF8+OmM0Kf1+D2t9Pl9L8fQ96Lym1GHKruw=)
3: SPQxl-sIx_CmX8izrtv12Y7kVyA.roa (hash: QFkpuPufNbHEesw8O151p6FVQDRuzn4BSiF8hTA4/X4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/c6e217-03ff-4396-adfe-255f0c51bbe0/1/BDaS8qHRvHb_f50pCRvtoIt7yWw.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/c6e217-03ff-4396-adfe-255f0c51bbe0/1/BDaS8qHRvHb_f50pCRvtoIt7yWw.mft
rsync://rpki.ripe.net/repository/DEFAULT/BDaS8qHRvHb_f50pCRvtoIt7yWw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 06:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:b6:17:64:4c:a0:da:8a:fd:d3:54:49:7b:ec:e8:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=043692f2a1d1bc76ff7f9d29091beda08b7bc96c
Validity
Not Before: Jul 24 06:00:34 2026 GMT
Not After : Jul 25 06:00:34 2026 GMT
Subject: CN=3953e9e0d1cf2ee26583ad6287cf16df480bcb2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:00:a5:66:ff:dd:24:b7:63:25:31:03:b8:9f:
1d:79:ba:e9:6e:db:8a:c9:8a:e4:a3:cb:d9:c7:4c:
38:28:b5:01:d4:2a:da:fa:b7:53:af:7a:67:51:55:
b0:78:5f:7b:10:41:31:be:c8:d5:5e:09:c5:3c:2b:
84:6a:e9:f9:9c:32:11:73:02:1d:f5:08:ec:86:f3:
b8:ff:14:d7:f2:14:f9:ae:0e:dd:73:b6:30:82:ad:
b8:d7:46:00:d7:4d:46:51:5e:c7:8f:13:fe:df:5e:
1b:30:f6:55:5f:55:9d:77:24:13:c9:07:8e:ae:e8:
dc:d8:5c:d6:8f:50:4c:9d:a2:ba:40:a7:08:85:87:
c5:c1:39:33:eb:24:0a:27:1a:30:f8:9b:19:4c:98:
23:f0:4b:2a:4d:8e:f9:3e:7f:68:61:c2:01:84:9c:
1f:56:cd:bb:98:dd:d9:ae:de:b6:c6:d2:f8:e7:97:
d1:06:2a:8d:0d:f1:67:de:b1:86:98:ec:f0:b0:1f:
6c:0b:43:3b:7f:82:e3:47:23:69:0a:33:3e:cf:23:
b9:5c:5f:09:55:a9:d2:bf:52:02:d6:76:f5:c7:87:
39:e9:af:1a:ad:09:c9:05:75:8e:d0:51:27:01:bc:
38:56:c3:95:eb:e9:ff:15:85:03:91:57:5a:12:62:
bf:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:53:E9:E0:D1:CF:2E:E2:65:83:AD:62:87:CF:16:DF:48:0B:CB:2C
X509v3 Authority Key Identifier:
keyid:04:36:92:F2:A1:D1:BC:76:FF:7F:9D:29:09:1B:ED:A0:8B:7B:C9:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BDaS8qHRvHb_f50pCRvtoIt7yWw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/c6e217-03ff-4396-adfe-255f0c51bbe0/1/BDaS8qHRvHb_f50pCRvtoIt7yWw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/c6e217-03ff-4396-adfe-255f0c51bbe0/1/BDaS8qHRvHb_f50pCRvtoIt7yWw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:f7:52:01:20:d7:e5:3d:28:2b:b2:6a:4f:47:2f:da:7b:ea:
52:aa:11:7a:85:a0:a1:8c:71:fe:24:ef:05:29:6c:ef:b4:e6:
bc:d4:e1:50:a7:79:ec:be:2e:34:d6:6f:ee:f3:d8:9a:ce:ce:
a9:32:4b:a7:b9:6f:7c:b1:61:2c:ad:07:2b:73:02:4d:8a:64:
a0:bf:e2:62:a9:5a:ec:c8:0c:c1:1d:eb:b2:62:d0:b8:27:21:
a9:ea:36:1e:dd:78:86:2a:7d:5d:9a:93:38:24:0e:5f:41:d5:
e6:26:8e:a9:d0:16:e3:73:fe:47:9b:4f:02:06:1b:a8:f6:f0:
c2:a2:17:1d:4f:4d:e7:c0:d6:57:a5:92:30:1c:e8:ac:e8:95:
39:91:73:09:50:46:67:47:95:1c:46:53:36:02:6f:a8:d9:34:
1f:54:cb:a2:91:bf:ba:50:2d:2d:71:f0:e6:e4:34:7f:84:5a:
c6:fc:c3:8b:60:f4:13:5c:a1:a9:55:60:28:ad:de:e8:d3:5a:
9e:bb:36:2c:39:10:f9:e9:58:b1:2f:78:fc:1c:5b:42:8f:a3:
57:ed:be:4f:0f:db:95:ac:65:e3:97:5d:c0:65:23:82:3c:c2:
52:8d:2f:7e:c4:08:dc:8f:55:16:f4:08:77:03:30:a4:31:fa:
89:1b:db:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:04:47 2026 by rpki-client